Skip to content

HBASE-28968 Bump jruby to 9.4.9.0 to fix rexml CVE - #6560

Merged
NihalJain merged 1 commit into
apache:masterfrom
NihalJain:HBASE-28968
Jan 7, 2025
Merged

HBASE-28968 Bump jruby to 9.4.9.0 to fix rexml CVE#6560
NihalJain merged 1 commit into
apache:masterfrom
NihalJain:HBASE-28968

Conversation

@NihalJain

Copy link
Copy Markdown
Contributor

No description provided.

@NihalJain

NihalJain commented Dec 24, 2024

Copy link
Copy Markdown
ContributorAuthor

Simple fix, jcoding and joni bump was not needed.
Verified that there is no regression with this change by running hbase shell basic sanity in standalone mode.

Not related: also verifed the last bootstrap commit and ensured there is no ui issues due to that

@Apache-HBase

This comment has been minimized.

@Apache-HBase

This comment has been minimized.

@Apache-HBase

This comment has been minimized.

@Apache-HBase

This comment has been minimized.

@NihalJain

Copy link
Copy Markdown
ContributorAuthor

Retriggering build, before merge!

@Apache-HBase

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 28sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+0 🆗codespell0m 0scodespell was not available.
+0 🆗detsecrets0m 0sdetect-secrets was not available.
+1 💚@author0m 0sThe patch does not contain any @author tags.
_ master Compile Tests _
+1 💚mvninstall3m 20smaster passed
+1 💚compile8m 28smaster passed
+1 💚spotless0m 46sbranch has no errors when running spotless:check.
_ Patch Compile Tests _
+1 💚mvninstall3m 6sthe patch passed
+1 💚compile8m 16sthe patch passed
+1 💚javac8m 16sthe patch passed
+1 💚blanks0m 0sThe patch has no blanks issues.
+1 💚xmllint0m 1sNo new issues.
+1 💚hadoopcheck11m 55sPatch does not cause any errors with Hadoop 3.3.6 3.4.0.
+1 💚spotless0m 48spatch has no errors when running spotless:check.
_ Other Tests _
+1 💚asflicense0m 15sThe patch does not generate ASF License warnings.
44m 30s
SubsystemReport/Notes
DockerClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6560/3/artifact/yetus-general-check/output/Dockerfile
GITHUB PR#6560
Optional Testsdupname asflicense javac codespell detsecrets xmllint hadoopcheck spotless compile
unameLinux 7b329c233a45 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionmaster / 606b1bd
Default JavaEclipse Adoptium-17.0.11+9
Max. process+thread count191 (vs. ulimit of 30000)
modulesC: . U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6560/3/console
versionsgit=2.34.1 maven=3.9.8 xmllint=20913
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Copy link
Copy Markdown

💔 -1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 30sDocker mode activated.
-0 ⚠️yetus0m 2sUnprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
_ Prechecks _
_ master Compile Tests _
+1 💚mvninstall3m 16smaster passed
+1 💚compile2m 35smaster passed
+1 💚javadoc2m 33smaster passed
+1 💚shadedjars6m 11sbranch has no errors when building our shaded downstream artifacts.
_ Patch Compile Tests _
+1 💚mvninstall3m 55sthe patch passed
+1 💚compile2m 30sthe patch passed
+1 💚javac2m 30sthe patch passed
+1 💚javadoc2m 19sthe patch passed
+1 💚shadedjars7m 2spatch has no errors when building our shaded downstream artifacts.
_ Other Tests _
-1 ❌unit284m 26s/patch-unit-root.txtroot in the patch failed.
320m 51s
SubsystemReport/Notes
DockerClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6560/3/artifact/yetus-jdk17-hadoop3-check/output/Dockerfile
GITHUB PR#6560
Optional Testsjavac javadoc unit shadedjars compile
unameLinux 7f6e06b1480e 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionmaster / 606b1bd
Default JavaEclipse Adoptium-17.0.11+9
Test Resultshttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6560/3/testReport/
Max. process+thread count4795 (vs. ulimit of 30000)
modulesC: . U: .
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-6560/3/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@NihalJain
NihalJain merged commit d67d93d into apache:masterJan 7, 2025
NihalJain added a commit to NihalJain/hbase that referenced this pull request Jan 7, 2025
Signed-off-by: Duo Zhang <zhangduo@apache.org>
NihalJain added a commit to NihalJain/hbase that referenced this pull request Jan 7, 2025
Signed-off-by: Duo Zhang <zhangduo@apache.org>
NihalJain added a commit that referenced this pull request Jan 13, 2025
Signed-off-by: Duo Zhang <zhangduo@apache.org>
NihalJain added a commit that referenced this pull request Jan 13, 2025
Signed-off-by: Duo Zhang <zhangduo@apache.org>
ragarkar pushed a commit to ragarkar/hbase that referenced this pull request Jan 13, 2025
Signed-off-by: Duo Zhang <zhangduo@apache.org>
mokai87 pushed a commit to mokai87/hbase that referenced this pull request Aug 7, 2025
Asmoday pushed a commit to arenadata/hbase that referenced this pull request Apr 15, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@NihalJain@Apache-HBase@Apache9